{
"badges": [],
"description": "Zama Confidential Tokens is an app that wraps ERC-20 assets into confidential tokens and hides balances and transfer amounts using Zama FHEVM on Ethereum.",
"detailedDescription": "Zama Confidential Tokens is an account-based confidential token system on Ethereum, using the Zama FHE protocol. It is based on [ERC-7984](https://eips.ethereum.org/EIPS/eip-7984). Users deposit regular ERC-20 tokens into asset-specific escrows and receive confidential tokens whose balances and internal transfer amounts are represented as encrypted handles.\n\n'Confidential' here means `from:` and `to:` addresses and transfer timestamps always remain public. Only balances and transfer amounts are hidden. Each confidential token aggregates encrypted balances for a single underlying asset, so the hidden state is the amount and balance data, not the public address graph.\n\n\n\n### Architecture\n\nThe Zama FHE protocol uses fully homomorphic encryption to let smart contracts operate on encrypted values. Balances are stored as encrypted handles instead of plaintext balances, and FHEVM system contracts are called for encrypted arithmetic, comparisons, transfers, minting, or burning, but most of the actual FHE execution happens offchain.\n\nThe FHE coprocessor is an offchain service that performs FHE-related work the EVM cannot execute directly. Encrypted user inputs are accepted onchain only after the InputVerifier checks signatures from the coprocessor signer set (currently 1/1). The coprocessor is constrained on what it can commit onchain by the smart contract, but it is not trustless and can affect validity if compromised.\n\nThe ACL is the onchain access-control registry for encrypted handles. It records which accounts or contracts are allowed to use a ciphertext handle, which prevents arbitrary users from reusing encrypted values they do not control.\n\nThe (T)KMS is the threshold key-management service used for private and public decryptions. It holds the FHE secret key and functions like a multisig with a threshold (7/13). An unwrap for example burns an encrypted confidential-token amount and asks for that amount to be publicly decrypted; finalization is accepted only after the KMSVerifier checks enough KMS signatures over the threshold-decrypted result. The KMS Signers are operated by [Zama, Dfns, Figment, Fireblocks, InfStones, Unit410, LayerZero, Ledger, Omakase, Stake Capital, OpenZeppelin, Etherscan, and Conduit](https://docs.zama.org/protocol/protocol-apps/addresses/mainnet/ethereum#operator-staking).\n\nThere are many moving parts and offchain components in the Zama FHE protocol on which Zama Confidential Tokens is built. The Zama Gateway, an L3 on Arbitrum, is currently used to gather signatures and make data available but the authority for asset storage and signature verification remains Ethereum L1.\n\n### Privacy considerations\n\nDeposits and withdrawals are public privacy boundaries. A `wrap` emits the confidential-token recipient and the rounded clear underlying-token amount. The recipient can be different from the depositor, but that relationship is still visible in the deposit event. Withdrawals then reveal the recipient and amount.\n\nWithin a confidential token, holders can make confidential transfers between transparent EVM addresses. These transfers reveal the parties and encrypted ciphertext handles, but not the clear amount or resulting balances. The confidential balances and transfer amounts of users can be decrypted by 7/13 KMS signers, including retroactively.\n\nThe smart contracts do not fully validate FHE offchain work, which makes the KMS and coprocessor each trusted for security, privacy and liveness. Encrypted user inputs are accepted through the InputVerifier, which requires 1/1 coprocessor signatures. Public decryptions are accepted through the KMSVerifier, which requires 7/13 KMS signatures. Decentralization of the critical offchain services is announced in the docs but not implemented onchain (e.g. coprocessors, fraud proofs, slashing, zk proofs).\n\nPractical privacy also depends on timing, amounts, address reuse, wallet/RPC providers, and any frontend or service used to create encrypted inputs. Users are advised to research [OPSEC best practice](/publications/privacy-best-practices).\n\n### Fees\n\nThere currently is no protocol fee. Users still pay Ethereum gas for each action, including confidential token transfers, and may pay costs charged by external wallets, relayers, or services used to create or submit transactions.\n\n### Compliance\n\nCompliance is enforced in each confidential token contract. The owner can block and unblock local users, and confidential token contracts can be configured to call an underlying-token denylist function. These checks apply to direct deposits, ERC-1363 callback deposits, confidential transfers, unwrap requests, and unwrap finalization.\n\nBecause confidential tokens are backed by underlying tokens held in their contract addresses, issuer or token-admin controls over those underlyings remain a dependency. If an underlying token admin blocks a confidential token address, the escrowed token can become stuck. If a user address is blocked by an underlying token and the confidential token has a transitive denylist hook configured, that address can be prevented from depositing, transferring, or completing withdrawals.\n\n### Anonymity set\n\nZama Confidential Tokens does not use fixed-denomination notes. For a given finalized withdrawal, the set of prior deposits that could have funded the withdrawing account through the public address graph is its effective anonymity set: deposits credited to the same address, or to addresses that visibly transferred confidential tokens to it before the withdrawal. Amounts are private inside the confidential token, so links within the remaining candidate set can remain ambiguous, but deposits and finalized withdrawals expose each boundary amount and endpoint address. Integration with DeFi and its use from inside the confidential token increases the anonymity set.\n\nAs mentioned in 'Privacy Considerations', the mostly centralized offchain services that cannot be circumvented can corrupt practical privacy, independent of the abstract measurable anonymity set.",
"detailedDescription": "Zama Confidential Tokens is an account-based confidential token system on Ethereum, using the Zama FHE protocol. It is based on [ERC-7984](https://eips.ethereum.org/EIPS/eip-7984). Users deposit regular ERC-20 tokens into asset-specific escrows and receive confidential tokens whose balances and internal transfer amounts are represented as encrypted handles.\n\n'Confidential' here means `from:` and `to:` addresses and transfer timestamps always remain public. Only balances and transfer amounts are hidden. Each confidential token aggregates encrypted balances for a single underlying asset, so the hidden state is the amount and balance data, not the public address graph.\n\n\n\n### Architecture\n\nThe Zama FHE protocol uses fully homomorphic encryption to let smart contracts operate on encrypted values. Balances are stored as encrypted handles instead of plaintext balances, and FHEVM system contracts are called for encrypted arithmetic, comparisons, transfers, minting, or burning, but most of the actual FHE execution happens offchain.\n\nThe FHE coprocessor is an offchain service that performs FHE-related work the EVM cannot execute directly. Encrypted user inputs are accepted onchain only after the InputVerifier checks signatures from the coprocessor signer set (currently 1/1). The coprocessor is constrained on what it can commit onchain by the smart contract, but it is not trustless and can affect validity if compromised.\n\nThe ACL is the onchain access-control registry for encrypted handles. It records which accounts or contracts are allowed to use a ciphertext handle, which prevents arbitrary users from reusing encrypted values they do not control.\n\nThe (T)KMS is the threshold key-management service used for private and public decryptions. It holds the FHE secret key and functions like a multisig; the current Ethereum verifier context (KMS signer set) has a threshold of 7/13. Each context can be different but retains its full permissions until explicitly invalidated onchain. A malicious new Ethereum verifier context, or the threshold of any retained Ethereum verifier context, can attest an inflated amount for an attacker's real unwrap handle and drain pooled backing deposited by other users. The KMS Signers are operated by [Zama, Dfns, Figment, Fireblocks, InfStones, Unit410, LayerZero, Ledger, Omakase, Stake Capital, OpenZeppelin, Etherscan, and Conduit](https://docs.zama.org/protocol/protocol-apps/addresses/mainnet/ethereum#operator-staking).\n\nThe onchain KMS signer addresses are ECDSA credentials used to attest KMS outputs; they are not the FHE key shares. [Zama states](https://docs.zama.org/protocol/protocol/overview/kms) that KMS MPC nodes run inside AWS Nitro Enclaves, and its offchain software maps node signing keys to MPC parties, but the contracts do not verify Nitro attestations or prove that a configured signer runs inside a TEE, holds an FHE key share, or participated in the threshold computation. Changing an onchain KMS context only changes which signatures are accepted; it neither triggers nor verifies redistribution or destruction of FHE key shares.\n\nThere are many moving parts and offchain components in the Zama FHE protocol on which Zama Confidential Tokens is built. The Zama Gateway, an L3 on Arbitrum, is currently used for coordination/aggregation, ciphertext-metadata, and key-lifecycles. Ethereum does not trust its state directly and independently verifies operator signatures before accepting inputs or withdrawals, but current relayer and operator workflows depend on Gateway availability to produce those proofs.\n\n### Privacy considerations\n\nDeposits and withdrawals are public privacy boundaries. A `wrap` emits the confidential-token recipient and the rounded clear underlying-token amount. The recipient can be different from the depositor, but that relationship is still visible in the deposit event. Withdrawals then reveal the recipient and amount.\n\nWithin a confidential token, holders can make confidential transfers between transparent EVM addresses. These transfers reveal the parties and encrypted ciphertext handles, but not the clear amount or resulting balances. The confidential balances and transfer amounts of users can be decrypted retroactively if enough KMS key shares are combined.\n\nThe smart contracts do not fully validate FHE offchain work, which makes the KMS and coprocessor each trusted for security, privacy and liveness. Encrypted user inputs are accepted through the InputVerifier, which requires 1/1 coprocessor signatures. Public decryptions are accepted through the KMSVerifier, which requires the threshold of any selected non-invalidated context (signer set), not necessarily the displayed current 7/13 context. Decentralization of the critical offchain services is announced in the docs but not implemented onchain (e.g. coprocessors, fraud proofs, slashing, zk proofs).\n\nPractical privacy also depends on timing, amounts, address reuse, wallet/RPC providers, and any frontend or service used to create encrypted inputs. Users are advised to research [OPSEC best practice](/publications/privacy-best-practices).\n\n### Fees\n\nThere currently is no protocol fee. Users still pay Ethereum gas for each action, including confidential token transfers, and may pay costs charged by external wallets, relayers, or services used to create or submit transactions.\n\n### Compliance\n\nCompliance is enforced in each confidential token contract. The owner can block and unblock local users, and confidential token contracts can be configured to call an underlying-token denylist function. These checks apply to direct deposits, ERC-1363 callback deposits, confidential transfers, unwrap requests, and unwrap finalization.\n\nBecause confidential tokens are backed by underlying tokens held in their contract addresses, issuer or token-admin controls over those underlyings remain a dependency. If an underlying token admin blocks a confidential token address, the escrowed token can become stuck. If a user address is blocked by an underlying token and the confidential token has a transitive denylist hook configured, that address can be prevented from depositing, transferring, or completing withdrawals.\n\n### Anonymity set\n\nZama Confidential Tokens does not use fixed-denomination notes. For a given finalized withdrawal, the set of prior deposits that could have funded the withdrawing account through the public address graph is its effective anonymity set: deposits credited to the same address, or to addresses that visibly transferred confidential tokens to it before the withdrawal. Amounts are private inside the confidential token, so links within the remaining candidate set can remain ambiguous, but deposits and finalized withdrawals expose each boundary amount and endpoint address. Integration with DeFi and its use from inside the confidential token increases the anonymity set.\n\nAs mentioned in 'Privacy Considerations', the mostly centralized offchain services that cannot be circumvented can corrupt practical privacy, independent of the abstract measurable anonymity set.",
"links": {
"websites": [
"https://www.zama.org"
],
"documentation": [
"https://docs.zama.org/protocol"
],
"repositories": [
"https://github.com/zama-ai"
]
}
}
privacyInfo+4-4
{
"attributes": [
{
"id": "fhe",
"label": "FHE",
"description": "Uses fully homomorphic encryption for private computation over encrypted values."
},
{
"id": "privateAmounts",
"label": "Private amounts",
"description": "Transfer amounts are private, while sender and recipient addresses remain public."
},
{
"id": "anyAmount",
"label": "Any amount",
"description": "Deposits and withdrawals can have any size."
},
{
"id": "defi",
"label": "DeFi",
"description": "Interop with DeFi (swaps, vaults) from within the confidential token."
}
],
"exitWindow": {
"value": "None",
"sentiment": "bad",
"orderHint": 0,
"description": "The confidential token contracts and system contracts are upgradeable without an onchain delay, so users do not get a guaranteed withdrawal window before changes take effect."
},
"privacy": {
"value": "7/13 KMS threshold",
"value": "7/13 current KMS threshold",
"sentiment": "warning",
"description": "Privacy depends on fewer than the KMS threshold of signers to collude and be compromised. Each KMS signer is running inside a TEE. 7 compromised signers can decrypt all current and past private balances. Compliance can be enforced by confidential token owners blocking users and by configured underlying-token denylist hooks during deposits, transfers, unwrap requests, and unwrap finalization."
"description": "The displayed 7/13 threshold covers only the current Ethereum verifier context. A threshold with usable KMS key shares can decrypt current and past private balances. Separately, a signature threshold from any retained context can forge public decryption results without proving possession or use of those shares. Zama states that KMS nodes run inside TEEs, but this is not verified onchain. Compliance can be enforced by confidential token owners blocking users and by configured underlying-token denylist hooks during deposits, transfers, unwrap requests, and unwrap finalization."
},
"reproducibility": {
"value": "Partially reproducible",
"sentiment": "warning",
"description": "The smart contracts are source-available, but users also rely on offchain FHE execution and threshold decryption services whose outputs are accepted onchain through signature verification. The offchain data cannot currently be fully reproduced from Ethereum DA."
},
"riskSummary": "## Funds can be stolen if\n1. a malicious upgrade compromises the confidential token contracts or FHEVM contracts with their escrowed underlying tokens.\n2. 7/13 KMS signers attest to an incorrect public decryption during unwrap finalization, allowing more underlying tokens to be released than were burned.\n3. the 1/1 coprocessor input verification path accepts invalid encrypted inputs that bypass confidential balance checks.\n \n## Funds can be lost if\n1. an underlying token admin blacklists a confidential token address or otherwise prevents transfers from the contract.\n2. a user is blocked by the confidential token owner or by a configured underlying-token denylist before finalization/withdrawal.\n3. offchain ciphertext data required by the coprocessor or KMS for encrypted handles becomes unavailable and cannot be reconstructed.\n \n## Privacy can be lost if\n1. 7/13 KMS signers collude or are compromised and decrypt private ciphertext handles.\n2. the offchain coprocessor, wallet, relayer, frontend, or RPC path records enough metadata to link a user to encrypted inputs or transactions.\n3. deposits and withdrawals are linked by clear boundary amounts, recipient graph, timing, or address reuse.",
"riskSummary": "## Funds can be stolen if\n1. a malicious upgrade compromises the confidential token contracts or FHEVM contracts with their escrowed underlying tokens.\n2. the threshold of the current or any non-destroyed historical Ethereum KMS context attests an inflated unwrap amount, allowing pooled underlying deposited before or after that context existed to be released. Governance can also install a malicious context; 7/13 describes only the current context.\n3. the 1/1 coprocessor input verification path accepts invalid encrypted inputs that bypass confidential balance checks.\n \n## Funds can be lost if\n1. an underlying token admin blacklists a confidential token address or otherwise prevents transfers from the contract.\n2. a user is blocked by the confidential token owner or by a configured underlying-token denylist before finalization/withdrawal.\n3. offchain ciphertext data required by the coprocessor or KMS for encrypted handles becomes unavailable and cannot be reconstructed.\n \n## Privacy can be lost if\n1. enough KMS operators with usable key shares collude or are compromised and decrypt private ciphertext handles. 7/13 describes only the current verifier context, while retained contexts can have different memberships and thresholds.\n2. the offchain coprocessor, wallet, relayer, frontend, or RPC path records enough metadata to link a user to encrypted inputs or transactions.\n3. deposits and withdrawals are linked by clear boundary amounts, recipient graph, timing, or address reuse.",
"summaryTrackedItemName": "token",
"tokens": [
{
"token": {
"address": "0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48",
"iconUrl": "https://assets.coingecko.com/coins/images/6319/large/usdc.png?1696506694",
"symbol": "USDC",
"decimals": 6,
"priceId": "usd-coin",
"sinceTimestamp": 1766750819
},
"buckets": [
{
"id": "zama-cw-cUSDC",
"type": "pool",
"label": "cUSDC token",
"address": "eth:0xe978F22157048E5DB8E5d07971376e86671672B2",
"sinceTimestamp": 1766750819,
"deposit": {
"event": "0xcda691c81d2fd787d8c209adb4ae8b138f857d7575adf7669195ed05482e701b",
"extractor": "zamaWrap",
"params": {}
},
"withdrawal": {
"event": "0x87061fd1a5b3714805472c94c9eb8a6b8491992ee77791aa2594be67b92fd962",
"extractor": "zamaUnwrap",
"params": {
"rate": "1"
}
}
}
]
},
{
"token": {
"address": "0xdAC17F958D2ee523a2206206994597C13D831ec7",
"iconUrl": "https://assets.coingecko.com/coins/images/325/large/Tether.png?1696501661",
"symbol": "USDT",
"decimals": 6,
"priceId": "tether",
"sinceTimestamp": 1766750831
},
"buckets": [
{
"id": "zama-cw-cUSDT",
"type": "pool",
"label": "cUSDT token",
"address": "eth:0xAe0207C757Aa2B4019Ad96edD0092ddc63EF0c50",
"sinceTimestamp": 1766750831,
"deposit": {
"event": "0xcda691c81d2fd787d8c209adb4ae8b138f857d7575adf7669195ed05482e701b",
"extractor": "zamaWrap",
"params": {}
},
"withdrawal": {
"event": "0x87061fd1a5b3714805472c94c9eb8a6b8491992ee77791aa2594be67b92fd962",
"extractor": "zamaUnwrap",
"params": {
"rate": "1"
}
}
}
]
},
{
"token": {
"address": "0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",
"iconUrl": "https://assets.coingecko.com/coins/images/2518/large/weth.png?1696503332",
"symbol": "WETH",
"decimals": 18,
"priceId": "weth",
"sinceTimestamp": 1766750843
},
"buckets": [
{
"id": "zama-cw-cWETH",
"type": "pool",
"label": "cWETH token",
"address": "eth:0xda9396b82634Ea99243cE51258B6A5Ae512D4893",
"sinceTimestamp": 1766750843,
"deposit": {
"event": "0xcda691c81d2fd787d8c209adb4ae8b138f857d7575adf7669195ed05482e701b",
"extractor": "zamaWrap",
"params": {}
},
"withdrawal": {
"event": "0x87061fd1a5b3714805472c94c9eb8a6b8491992ee77791aa2594be67b92fd962",
"extractor": "zamaUnwrap",
"params": {
"rate": "1000000000000"
}
}
}
]
},
{
"token": {
"address": "0xA12CC123ba206d4031D1c7f6223D1C2Ec249f4f3",
"iconUrl": "https://coin-images.coingecko.com/coins/images/70921/large/zama.png?1764591992",
"symbol": "ZAMA",
"decimals": 18,
"priceId": "zama",
"sinceTimestamp": 1766750867
},
"buckets": [
{
"id": "zama-cw-cZAMA",
"type": "pool",
"label": "cZAMA token",
"address": "eth:0x80CB147Fd86dC6dEe3Eee7e4Cee33d1397d98071",
"sinceTimestamp": 1766750867,
"deposit": {
"event": "0xcda691c81d2fd787d8c209adb4ae8b138f857d7575adf7669195ed05482e701b",
"extractor": "zamaWrap",
"params": {}
},
"withdrawal": {
"event": "0x87061fd1a5b3714805472c94c9eb8a6b8491992ee77791aa2594be67b92fd962",
"extractor": "zamaUnwrap",
"params": {
"rate": "1000000000000"
}
}
}
]
},
{
"token": {
"address": "0x27f6c8289550fCE67f6B50BeD1F519966aFE5287",
"iconUrl": "https://coin-images.coingecko.com/coins/images/70647/large/tgbp-square.png?1762953800",
"symbol": "tGBP",
"decimals": 18,
"priceId": "tokenised-gbp",
"sinceTimestamp": 1767000887
},
"buckets": [
{
"id": "zama-cw-ctGBP",
"type": "pool",
"label": "ctGBP token",
"address": "eth:0xa873750ccBafD5ec7Dd13bfD5237d7129832eDD9",
"sinceTimestamp": 1767000887,
"deposit": {
"event": "0xcda691c81d2fd787d8c209adb4ae8b138f857d7575adf7669195ed05482e701b",
"extractor": "zamaWrap",
"params": {}
},
"withdrawal": {
"event": "0x87061fd1a5b3714805472c94c9eb8a6b8491992ee77791aa2594be67b92fd962",
"extractor": "zamaUnwrap",
"params": {
"rate": "1000000000000"
}
}
}
]
},
{
"token": {
"address": "0x68749665FF8D2d112Fa859AA293F07A622782F38",
"iconUrl": "https://assets.coingecko.com/coins/images/10481/large/Tether_Gold.png?1696510471",
"symbol": "XAUt",
"decimals": 6,
"priceId": "tether-gold",
"sinceTimestamp": 1772116091
},
"buckets": [
{
"id": "zama-cw-cXAUt",
"type": "pool",
"label": "cXAUt token",
"address": "eth:0x73cc9aF9d6BEFdb3c3fAf8a5E8c05Cb95FdaEEf1",
"sinceTimestamp": 1772116091,
"deposit": {
"event": "0xcda691c81d2fd787d8c209adb4ae8b138f857d7575adf7669195ed05482e701b",
"extractor": "zamaWrap",
"params": {}
},
"withdrawal": {
"event": "0x87061fd1a5b3714805472c94c9eb8a6b8491992ee77791aa2594be67b92fd962",
"extractor": "zamaUnwrap",
"params": {
"rate": "1"
}
}
}
]
},
{
"token": {
"address": "0xbeeffABcd0dB09589Dd21854aa760C52aB4bf04F",
"iconUrl": "https://coin-images.coingecko.com/coins/images/70647/large/tgbp-square.png?1762953800",
"symbol": "bbqTGBP",
"decimals": 18,
"priceId": "tokenised-gbp",
"sinceTimestamp": 1780585031
},
"buckets": [
{
"id": "zama-cw-cbbqTGBP",
"type": "pool",
"label": "cbbqTGBP token",
"address": "eth:0xBA4cFF6ED6F7Cb2A58776dECa4E984b498446762",
"sinceTimestamp": 1780585031,
"deposit": {
"event": "0xcda691c81d2fd787d8c209adb4ae8b138f857d7575adf7669195ed05482e701b",
"extractor": "zamaWrap",
"params": {}
},
"withdrawal": {
"event": "0x87061fd1a5b3714805472c94c9eb8a6b8491992ee77791aa2594be67b92fd962",
"extractor": "zamaUnwrap",
"params": {
"rate": "1000000000000"
}
}
}
]
},
{
"token": {
"address": "0xbEEF00A59B577423653A1526c7009bdE103F542B",
"iconUrl": "https://coin-images.coingecko.com/coins/images/6319/large/USDC.png?1769615602",
"symbol": "steakcUSDC",
"decimals": 18,
"priceId": "usd-coin",
"sinceTimestamp": 1781877707
},
"buckets": [
{
"id": "zama-cw-csteakcUSDC",
"type": "pool",
"label": "csteakcUSDC token",
"address": "eth:0x66Bf74E96900D1a19c7070D939D124f2F565C458",
"sinceTimestamp": 1781877707,
"deposit": {
"event": "0xcda691c81d2fd787d8c209adb4ae8b138f857d7575adf7669195ed05482e701b",
"extractor": "zamaWrap",
"params": {}
},
"withdrawal": {
"event": "0x87061fd1a5b3714805472c94c9eb8a6b8491992ee77791aa2594be67b92fd962",
"extractor": "zamaUnwrap",
"params": {
"rate": "1000000000000"
}
}
}
]
}
],
"upgradesAndGovernance": "Zama governance is implemented through an Aragon 'DAO' deployment controlled by two multisigs: ZamaGovMultisigA with a 9/17 threshold and ZamaGovMultisigB with a 3/5 threshold. The multisigs can upgrade contracts or change critical configuration without a timelock.\n\nConfidential token owners and underlying token owners can freeze users. The ACL owner can manage ACL-level account blocking and unpause the ACL, while pausers from the PauserSet can pause the ACL. The exact roles and accounts are listed in the permissions section.\n\nOffchain components like the coprocessor and KMS are trusted for liveness, privacy and security and are currently not decentralized."
"upgradesAndGovernance": "Zama Confidential Tokens governance is implemented through an Aragon 'DAO' deployment controlled by two multisigs: ZamaGovMultisigA with a 9/17 threshold and ZamaGovMultisigB with a 3/5 threshold. The Gateway contracts are controlled separately by the SafeL2 multisig listed in the permissions section. These accounts can upgrade contracts or change critical configuration without a timelock.\n\nConfidential token owners and underlying token owners can freeze users. The Ethereum ACL owner can manage ACL-level account blocking, unpause the ACL, change HCU limits, and create KMS contexts with arbitrary signer sets and thresholds. A new context immediately becomes the default verifier authority and can attest unwrap amounts for assets deposited before it existed. Superseded contexts remain equally authoritative for all past and future ciphertext handles until the ACL owner explicitly destroys them; the current context cannot be destroyed. Changing an onchain KMS context changes only the accepted ECDSA credentials and does not trigger or verify resharing or destruction of the underlying FHE key shares.\n\nOffchain components like the coprocessor and KMS are trusted for liveness, privacy and security and are currently not decentralized."
}
permissions+3-3
{
"ethereum": {
"roles": [],
"actors": [
{
"id": "ZamaGovMultisigB",
"name": "ZamaGovMultisigB",
"description": "A Multisig with 3/5 threshold. \nAragon multisig plugin for creating proposals and collecting approvals against a configurable threshold.\n* Can upgrade **with no delay**\n * HCULimit [via: DAO]\n * ConfidentialSteakcUSDCWrapper [via: DAO]\n * Staking (Coprocessor) [via: DAO]\n * ConfidentialXAUTWrapper [via: DAO]\n * KMSVerifier [via: DAO]\n * ConfidentialZAMAWrapper [via: DAO]\n * ConfidentialBRONWrapper [via: DAO]\n * ConfidentialTGBPWrapper [via: DAO]\n * ConfidentialUSDTWrapper [via: DAO]\n * DAO [via: DAO]\n * ConfidentialBbqTGBPWrapper [via: DAO]\n * ACL [via: DAO]\n * InputVerifier [via: DAO]\n * FHEVMExecutor [via: DAO]\n * ConfidentialWETHWrapper [via: DAO]\n * ConfidentialUSDCWrapper [via: DAO]\n * Staking (KMS) [via: DAO]\n * ConfidentialTokenWrappersRegistry [via: DAO]\n* Can interact with ConfidentialSteakcUSDCWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with Staking (Coprocessor)\n * grant and revoke manager accounts, transfer or renounce the default admin role, and change the default admin transfer delay [via: DAO]\n * set the reward rate, set the unstake cooldown period, and add or remove reward-eligible staking accounts [via: DAO]\n* Can interact with ConfidentialXAUTWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with KMSVerifier\n * set the KMS signer set and signature threshold used for public decryption verification [via: DAO]\n* Can interact with ConfidentialZAMAWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with ConfidentialBRONWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with ConfidentialTGBPWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with ConfidentialUSDTWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with DAO\n * change multisig plugin settings [via: DAO - or - acting directly]\n * change multisig plugin target execution configuration [via: DAO - or - acting directly]\n * grant and revoke DAO permissions [via: DAO]\n* Can interact with ConfidentialBbqTGBPWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with PauserSet\n * add, remove, or swap accounts that can pause the ACL [via: DAO]\n* Can interact with ACL\n * transfer ACL ownership, unpause the ACL, block or unblock accounts, manage PauserSet membership, and update Zama verifier signer sets and thresholds [via: DAO]\n* Can interact with InputVerifier\n * set the coprocessor signer set and signature threshold used for encrypted input verification [via: DAO]\n* Can interact with ConfidentialWETHWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with ConfidentialUSDCWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with Staking (KMS)\n * grant and revoke manager accounts, transfer or renounce the default admin role, and change the default admin transfer delay [via: DAO]\n * set the reward rate, set the unstake cooldown period, and add or remove reward-eligible staking accounts [via: DAO]\n* Can interact with ConfidentialTokenWrappersRegistry\n * manage addresses in the registry [via: DAO]",
"description": "A Multisig with 3/5 threshold. \nAragon multisig plugin for creating proposals and collecting approvals against a configurable threshold.\n* Can upgrade **with no delay**\n * HCULimit [via: DAO]\n * ConfidentialSteakcUSDCWrapper [via: DAO]\n * Staking (Coprocessor) [via: DAO]\n * ConfidentialXAUTWrapper [via: DAO]\n * KMSVerifier [via: DAO]\n * ConfidentialZAMAWrapper [via: DAO]\n * ConfidentialBRONWrapper [via: DAO]\n * ConfidentialTGBPWrapper [via: DAO]\n * ConfidentialUSDTWrapper [via: DAO]\n * DAO [via: DAO]\n * ConfidentialBbqTGBPWrapper [via: DAO]\n * ACL [via: DAO]\n * InputVerifier [via: DAO]\n * FHEVMExecutor [via: DAO]\n * ConfidentialWETHWrapper [via: DAO]\n * ConfidentialUSDCWrapper [via: DAO]\n * Staking (KMS) [via: DAO]\n * ConfidentialTokenWrappersRegistry [via: DAO]\n* Can interact with HCULimit\n * change the per-block and per-transaction HCU limits and manage callers that bypass the per-block limit [via: DAO]\n* Can interact with ConfidentialSteakcUSDCWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with Staking (Coprocessor)\n * grant and revoke manager accounts, transfer or renounce the default admin role, and change the default admin transfer delay [via: DAO]\n * set the reward rate, set the unstake cooldown period, and add or remove reward-eligible staking accounts [via: DAO]\n* Can interact with ConfidentialXAUTWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with KMSVerifier\n * create KMS signer contexts with arbitrary signer sets and thresholds, and destroy non-current contexts. A malicious context can attest an inflated unwrap amount and drain pooled wrapper backing [via: DAO]\n* Can interact with ConfidentialZAMAWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with ConfidentialBRONWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with ConfidentialTGBPWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with ConfidentialUSDTWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with DAO\n * change multisig plugin settings [via: DAO - or - acting directly]\n * change multisig plugin target execution configuration [via: DAO - or - acting directly]\n * grant and revoke DAO permissions [via: DAO]\n* Can interact with ConfidentialBbqTGBPWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with PauserSet\n * add, remove, or swap accounts that can pause the ACL [via: DAO]\n* Can interact with ACL\n * transfer ACL ownership, unpause the ACL, block or unblock accounts, manage PauserSet membership, and create or destroy KMSVerifier signer contexts [via: DAO]\n* Can interact with InputVerifier\n * set the coprocessor signer set and signature threshold used for encrypted input verification [via: DAO]\n* Can interact with ConfidentialWETHWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with ConfidentialUSDCWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with Staking (KMS)\n * grant and revoke manager accounts, transfer or renounce the default admin role, and change the default admin transfer delay [via: DAO]\n * set the reward rate, set the unstake cooldown period, and add or remove reward-eligible staking accounts [via: DAO]\n* Can interact with ConfidentialTokenWrappersRegistry\n * manage addresses in the registry [via: DAO]",
"accounts": [
{
"address": "eth:0xBc860b6a4C860C5424B84A056E53ACFb2C99a38F",
"type": "Contract",
"isVerified": true,
"name": "0xBc86…a38F",
"url": "https://etherscan.io/address/0xBc860b6a4C860C5424B84A056E53ACFb2C99a38F"
}
],
"chain": "ethereum",
"references": [],
"participants": [
{
"address": "eth:0x9b828219ad863491eb9b5225aE2d133eEDEa9B71",
"type": "EOA",
"isVerified": true,
"name": "EOA 48",
"url": "#EOA-45-and-EOA-48"
},
{
"address": "eth:0xf299Cd189498D7d0F0FfACd4DdC94166f614fBBE",
"type": "EOA",
"isVerified": true,
"name": "0xf299…fBBE",
"url": "https://etherscan.io/address/0xf299Cd189498D7d0F0FfACd4DdC94166f614fBBE"
},
{
"address": "eth:0x6dd470B50BbC1Ec03bf2B13B30c7d864F2025874",
"type": "EOA",
"isVerified": true,
"name": "EOA 45",
"url": "#EOA-45-and-EOA-48"
},
{
"address": "eth:0x8edFb885a32C72aF32943D4db13D319181d18CB8",
"type": "EOA",
"isVerified": true,
"name": "EOA 47",
"url": "#EOA-46-and-EOA-47"
},
{
"address": "eth:0x705380c013c13B4ce62338ab1F012036BAC802b3",
"type": "EOA",
"isVerified": true,
"name": "EOA 46",
"url": "#EOA-46-and-EOA-47"
}
],
"discoveryDrivenData": true
},
{
"id": "ZamaGovMultisigA",
"name": "ZamaGovMultisigA",
"description": "A Multisig with 9/17 threshold. \nAragon multisig plugin for creating proposals and collecting approvals against a configurable threshold.\n* Can upgrade **with no delay**\n * HCULimit [via: DAO]\n * ConfidentialSteakcUSDCWrapper [via: DAO]\n * Staking (Coprocessor) [via: DAO]\n * ConfidentialXAUTWrapper [via: DAO]\n * KMSVerifier [via: DAO]\n * ConfidentialZAMAWrapper [via: DAO]\n * ConfidentialBRONWrapper [via: DAO]\n * ConfidentialTGBPWrapper [via: DAO]\n * ConfidentialUSDTWrapper [via: DAO]\n * DAO [via: DAO]\n * ConfidentialBbqTGBPWrapper [via: DAO]\n * ACL [via: DAO]\n * InputVerifier [via: DAO]\n * FHEVMExecutor [via: DAO]\n * ConfidentialWETHWrapper [via: DAO]\n * ConfidentialUSDCWrapper [via: DAO]\n * Staking (KMS) [via: DAO]\n * ConfidentialTokenWrappersRegistry [via: DAO]\n* Can interact with ConfidentialSteakcUSDCWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with Staking (Coprocessor)\n * grant and revoke manager accounts, transfer or renounce the default admin role, and change the default admin transfer delay [via: DAO]\n * set the reward rate, set the unstake cooldown period, and add or remove reward-eligible staking accounts [via: DAO]\n* Can interact with ConfidentialXAUTWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with KMSVerifier\n * set the KMS signer set and signature threshold used for public decryption verification [via: DAO]\n* Can interact with ConfidentialZAMAWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with ConfidentialBRONWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with ConfidentialTGBPWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with ConfidentialUSDTWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with DAO\n * change multisig plugin settings [via: DAO - or - acting directly]\n * change multisig plugin target execution configuration [via: DAO - or - acting directly]\n * grant and revoke DAO permissions [via: DAO]\n* Can interact with ConfidentialBbqTGBPWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with PauserSet\n * add, remove, or swap accounts that can pause the ACL [via: DAO]\n* Can interact with ACL\n * transfer ACL ownership, unpause the ACL, block or unblock accounts, manage PauserSet membership, and update Zama verifier signer sets and thresholds [via: DAO]\n* Can interact with InputVerifier\n * set the coprocessor signer set and signature threshold used for encrypted input verification [via: DAO]\n* Can interact with ConfidentialWETHWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with ConfidentialUSDCWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with Staking (KMS)\n * grant and revoke manager accounts, transfer or renounce the default admin role, and change the default admin transfer delay [via: DAO]\n * set the reward rate, set the unstake cooldown period, and add or remove reward-eligible staking accounts [via: DAO]\n* Can interact with ConfidentialTokenWrappersRegistry\n * manage addresses in the registry [via: DAO]",
"description": "A Multisig with 9/17 threshold. \nAragon multisig plugin for creating proposals and collecting approvals against a configurable threshold.\n* Can upgrade **with no delay**\n * HCULimit [via: DAO]\n * ConfidentialSteakcUSDCWrapper [via: DAO]\n * Staking (Coprocessor) [via: DAO]\n * ConfidentialXAUTWrapper [via: DAO]\n * KMSVerifier [via: DAO]\n * ConfidentialZAMAWrapper [via: DAO]\n * ConfidentialBRONWrapper [via: DAO]\n * ConfidentialTGBPWrapper [via: DAO]\n * ConfidentialUSDTWrapper [via: DAO]\n * DAO [via: DAO]\n * ConfidentialBbqTGBPWrapper [via: DAO]\n * ACL [via: DAO]\n * InputVerifier [via: DAO]\n * FHEVMExecutor [via: DAO]\n * ConfidentialWETHWrapper [via: DAO]\n * ConfidentialUSDCWrapper [via: DAO]\n * Staking (KMS) [via: DAO]\n * ConfidentialTokenWrappersRegistry [via: DAO]\n* Can interact with HCULimit\n * change the per-block and per-transaction HCU limits and manage callers that bypass the per-block limit [via: DAO]\n* Can interact with ConfidentialSteakcUSDCWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with Staking (Coprocessor)\n * grant and revoke manager accounts, transfer or renounce the default admin role, and change the default admin transfer delay [via: DAO]\n * set the reward rate, set the unstake cooldown period, and add or remove reward-eligible staking accounts [via: DAO]\n* Can interact with ConfidentialXAUTWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with KMSVerifier\n * create KMS signer contexts with arbitrary signer sets and thresholds, and destroy non-current contexts. A malicious context can attest an inflated unwrap amount and drain pooled wrapper backing [via: DAO]\n* Can interact with ConfidentialZAMAWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with ConfidentialBRONWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with ConfidentialTGBPWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with ConfidentialUSDTWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with DAO\n * change multisig plugin settings [via: DAO - or - acting directly]\n * change multisig plugin target execution configuration [via: DAO - or - acting directly]\n * grant and revoke DAO permissions [via: DAO]\n* Can interact with ConfidentialBbqTGBPWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with PauserSet\n * add, remove, or swap accounts that can pause the ACL [via: DAO]\n* Can interact with ACL\n * transfer ACL ownership, unpause the ACL, block or unblock accounts, manage PauserSet membership, and create or destroy KMSVerifier signer contexts [via: DAO]\n* Can interact with InputVerifier\n * set the coprocessor signer set and signature threshold used for encrypted input verification [via: DAO]\n* Can interact with ConfidentialWETHWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with ConfidentialUSDCWrapper\n * block and unblock users, and transfer ownership [via: DAO]\n* Can interact with Staking (KMS)\n * grant and revoke manager accounts, transfer or renounce the default admin role, and change the default admin transfer delay [via: DAO]\n * set the reward rate, set the unstake cooldown period, and add or remove reward-eligible staking accounts [via: DAO]\n* Can interact with ConfidentialTokenWrappersRegistry\n * manage addresses in the registry [via: DAO]",
"accounts": [
{
"address": "eth:0xE43c73aAb2b6aBBad6d0461997ce1cfea5ABe66f",
"type": "Contract",
"isVerified": true,
"name": "0xE43c…e66f",
"url": "https://etherscan.io/address/0xE43c73aAb2b6aBBad6d0461997ce1cfea5ABe66f"
}
],
"chain": "ethereum",
"references": [],
"participants": [
{
"address": "eth:0x31bBD7a242A38372DE92CA304fE29C12C90A382C",
"type": "Contract",
"isVerified": true,
"name": "ZamaGovMemberDAO",
"url": "#ZamaGovMemberDAO"
},
{
"address": "eth:0x644f248299FA8E1DE46C97A72C36F354Ccdb8a1e",
"type": "EOA",
"isVerified": true,
"name": "0x644f…8a1e",
"url": "https://etherscan.io/address/0x644f248299FA8E1DE46C97A72C36F354Ccdb8a1e"
},
{
"address": "eth:0x0321a4Ee7E843A83Fa314f4e76E756864CBdE62e",
"type": "EOA",
"isVerified": true,
"name": "0x0321…E62e",
"url": "https://etherscan.io/address/0x0321a4Ee7E843A83Fa314f4e76E756864CBdE62e"
},
{
"address": "eth:0x0f81fd435d44Cc49f90BB74bF4BdE0e9A0554ae6",
"type": "EOA",
"isVerified": true,
"name": "0x0f81…4ae6",
"url": "https://etherscan.io/address/0x0f81fd435d44Cc49f90BB74bF4BdE0e9A0554ae6"
},
{
"address": "eth:0x931FB6Ec104dDc9bc556983032b5b85b671db000",
"type": "EOA",
"isVerified": true,
"name": "0x931F…b000",
"url": "https://etherscan.io/address/0x931FB6Ec104dDc9bc556983032b5b85b671db000"
},
{
"address": "eth:0x32f3D0D7E20Ca11Cad21f32Dad91506ea89f5897",
"type": "EOA",
"isVerified": true,
"name": "0x32f3…5897",
"url": "https://etherscan.io/address/0x32f3D0D7E20Ca11Cad21f32Dad91506ea89f5897"
},
{
"address": "eth:0xE53e32a669357Ab0360103d8f294812B914AF9e4",
"type": "Contract",
"isVerified": true,
"name": "Safe",
"url": "https://etherscan.io/address/0xE53e32a669357Ab0360103d8f294812B914AF9e4"
},
{
"address": "eth:0xc2e5960EDa1E8D801b19e96D886B946Dfb4bE709",
"type": "EOA",
"isVerified": true,
"name": "0xc2e5…E709",
"url": "https://etherscan.io/address/0xc2e5960EDa1E8D801b19e96D886B946Dfb4bE709"
},
{
"address": "eth:0x8c0E2c46F96756C49DBd6723F4C57a03a254B4B0",
"type": "Contract",
"isVerified": true,
"name": "Safe",
"url": "https://etherscan.io/address/0x8c0E2c46F96756C49DBd6723F4C57a03a254B4B0"
},
{
"address": "eth:0x23Cd5e0f3bd1543CBCc5d05bB55e5446be4AD96b",
"type": "EOA",
"isVerified": true,
"name": "0x23Cd…D96b",
"url": "https://etherscan.io/address/0x23Cd5e0f3bd1543CBCc5d05bB55e5446be4AD96b"
},
{
"address": "eth:0x4a4962275DF8C60a80d3a25faEc5AA7De116A746",
"type": "Contract",
"isVerified": true,
"name": "Conduit Multisig 1",
"url": "https://etherscan.io/address/0x4a4962275DF8C60a80d3a25faEc5AA7De116A746"
},
{
"address": "eth:0x69E55790880d0ABa56E48Ee1f7fc3834b0F5c223",
"type": "Contract",
"isVerified": true,
"name": "Safe",
"url": "https://etherscan.io/address/0x69E55790880d0ABa56E48Ee1f7fc3834b0F5c223"
},
{
"address": "eth:0x8edFb885a32C72aF32943D4db13D319181d18CB8",
"type": "EOA",
"isVerified": true,
"name": "EOA 47",
"url": "#EOA-46-and-EOA-47"
},
{
"address": "eth:0x705380c013c13B4ce62338ab1F012036BAC802b3",
"type": "EOA",
"isVerified": true,
"name": "EOA 46",
"url": "#EOA-46-and-EOA-47"
},
{
"address": "eth:0x97E18544e156724E4076945F10c288ecBBC94e54",
"type": "Contract",
"isVerified": true,
"name": "Safe",
"url": "https://etherscan.io/address/0x97E18544e156724E4076945F10c288ecBBC94e54"
},
{
"address": "eth:0xE9AAc45091bF5d52AD7BC109497DAA7cD0245BdB",
"type": "EOA",
"isVerified": true,
"name": "0xE9AA…5BdB",
"url": "https://etherscan.io/address/0xE9AAc45091bF5d52AD7BC109497DAA7cD0245BdB"
},
{
"address": "eth:0xD92e1C1Ec65aBe6C6891EcE56a00c6b79A09C8AE",
"type": "EOA",
"isVerified": true,
"name": "0xD92e…C8AE",
"url": "https://etherscan.io/address/0xD92e1C1Ec65aBe6C6891EcE56a00c6b79A09C8AE"
}
],
"discoveryDrivenData": true
},
{
"id": "ZamaGovMemberDAO",
"name": "ZamaGovMemberDAO",
"accounts": [
{
"address": "eth:0x31bBD7a242A38372DE92CA304fE29C12C90A382C",
"type": "Contract",
"isVerified": true,
"name": "0x31bB…382C",
"url": "https://etherscan.io/address/0x31bBD7a242A38372DE92CA304fE29C12C90A382C"
}
],
"chain": "ethereum",
"description": "Aragon DAO that stores governance state and executes proposal action batches.\nMember of ZamaGovMultisigA.\n* Can interact with ZamaGovMemberDAO\n * change multisig plugin settings \n * change multisig plugin target execution configuration ",
"discoveryDrivenData": true
},
{
"id": "EOA-30",
"name": "EOA 30",
"accounts": [
{
"address": "eth:0x373E36A8684A3344E177C5894179845Cbe57AE44",
"type": "EOA",
"isVerified": true,
"name": "0x373E…AE44",
"url": "https://etherscan.io/address/0x373E36A8684A3344E177C5894179845Cbe57AE44",
"displayName": "EOA 30"
}
],
"chain": "ethereum",
"description": "* Can interact with InputVerifier\n * sign encrypted input verification bundles accepted by the InputVerifier ",
"discoveryDrivenData": true
},
{
"id": "EOA-31,-EOA-32,-EOA-33,-EOA-34,-EOA-35,-EOA-36,-EOA-37,-EOA-38,-EOA-39,-EOA-40,-EOA-41,-EOA-42-and-EOA-43",
"name": "EOA 31, EOA 32, EOA 33, EOA 34, EOA 35, EOA 36, EOA 37, EOA 38, EOA 39, EOA 40, EOA 41, EOA 42 and EOA 43",
"accounts": [
{
"address": "eth:0x41b19EB4585450db79ac03ba9503106EC7895905",
"type": "EOA",
"isVerified": true,
"name": "0x41b1…5905",
"url": "https://etherscan.io/address/0x41b19EB4585450db79ac03ba9503106EC7895905",
"displayName": "EOA 31"
},
{
"address": "eth:0x5d0e7033774dD43eE546D49b72Bd0B561E52f7C8",
"type": "EOA",
"isVerified": true,
"name": "0x5d0e…f7C8",
"url": "https://etherscan.io/address/0x5d0e7033774dD43eE546D49b72Bd0B561E52f7C8",
"displayName": "EOA 32"
},
{
"address": "eth:0x6016DCA5e91e62826e3FEA1Fb0a763602dc1E385",
"type": "EOA",
"isVerified": true,
"name": "0x6016…E385",
"url": "https://etherscan.io/address/0x6016DCA5e91e62826e3FEA1Fb0a763602dc1E385",
"displayName": "EOA 33"
},
{
"address": "eth:0x6e5f02Cd4B33f0Cf4ED5326ac9eE25e5aA8c4921",
"type": "EOA",
"isVerified": true,
"name": "0x6e5f…4921",
"url": "https://etherscan.io/address/0x6e5f02Cd4B33f0Cf4ED5326ac9eE25e5aA8c4921",
"displayName": "EOA 34"
},
{
"address": "eth:0x7C17BE232e5968BDa9516478B798b9E90D013fCC",
"type": "EOA",
"isVerified": true,
"name": "0x7C17…3fCC",
"url": "https://etherscan.io/address/0x7C17BE232e5968BDa9516478B798b9E90D013fCC",
"displayName": "EOA 35"
},
{
"address": "eth:0x7C5Eeb4D8CED0101799B8Cc212eE874097364F58",
"type": "EOA",
"isVerified": true,
"name": "0x7C5E…4F58",
"url": "https://etherscan.io/address/0x7C5Eeb4D8CED0101799B8Cc212eE874097364F58",
"displayName": "EOA 36"
},
{
"address": "eth:0x915055c5F05C0d88BCdf1e3DfBA18aBD2a18350f",
"type": "EOA",
"isVerified": true,
"name": "0x9150…350f",
"url": "https://etherscan.io/address/0x915055c5F05C0d88BCdf1e3DfBA18aBD2a18350f",
"displayName": "EOA 37"
},
{
"address": "eth:0x966188a1f697F6A1B5cfA51495DD8A8A7b5CdB8D",
"type": "EOA",
"isVerified": true,
"name": "0x9661…dB8D",
"url": "https://etherscan.io/address/0x966188a1f697F6A1B5cfA51495DD8A8A7b5CdB8D",
"displayName": "EOA 38"
},
{
"address": "eth:0xB7978e602D2AF68258dA614AF949E014BF0DE0eb",
"type": "EOA",
"isVerified": true,
"name": "0xB797…E0eb",
"url": "https://etherscan.io/address/0xB7978e602D2AF68258dA614AF949E014BF0DE0eb",
"displayName": "EOA 39"
},
{
"address": "eth:0xbf05c17BEB0BF2F2c78Cd491A53a148e035279C3",
"type": "EOA",
"isVerified": true,
"name": "0xbf05…79C3",
"url": "https://etherscan.io/address/0xbf05c17BEB0BF2F2c78Cd491A53a148e035279C3",
"displayName": "EOA 40"
},
{
"address": "eth:0xdC472efa1642D5afB684aAaa546E22FB24AAB965",
"type": "EOA",
"isVerified": true,
"name": "0xdC47…B965",
"url": "https://etherscan.io/address/0xdC472efa1642D5afB684aAaa546E22FB24AAB965",
"displayName": "EOA 41"
},
{
"address": "eth:0xDFc9Dcb3D206AA164770874f36a4B5AD2EE5194f",
"type": "EOA",
"isVerified": true,
"name": "0xDFc9…194f",
"url": "https://etherscan.io/address/0xDFc9Dcb3D206AA164770874f36a4B5AD2EE5194f",
"displayName": "EOA 42"
},
{
"address": "eth:0xe9f7ecfF21a2e0Ca58eA26ae869FEF38ab49ed6f",
"type": "EOA",
"isVerified": true,
"name": "0xe9f7…ed6f",
"url": "https://etherscan.io/address/0xe9f7ecfF21a2e0Ca58eA26ae869FEF38ab49ed6f",
"displayName": "EOA 43"
}
],
"chain": "ethereum",
"description": "* Can interact with KMSVerifier\n * sign public decryption results accepted by the KMSVerifier ",
"discoveryDrivenData": true
},
{
"id": "EOA-44-and-EOA-49",
"name": "EOA 44 and EOA 49",
"accounts": [
{
"address": "eth:0x6681101780Fb503591535B36bB3F15781f01EAAF",
"type": "EOA",
"isVerified": true,
"name": "0x6681…EAAF",
"url": "https://etherscan.io/address/0x6681101780Fb503591535B36bB3F15781f01EAAF",
"displayName": "EOA 44"
},
{
"address": "eth:0xBdBA7b00A4b2dd3d3382a4217e82C5930791E2aA",
"type": "EOA",
"isVerified": true,
"name": "0xBdBA…E2aA",
"url": "https://etherscan.io/address/0xBdBA7b00A4b2dd3d3382a4217e82C5930791E2aA",
"displayName": "EOA 49"
}
],
"chain": "ethereum",
"description": "Member of Safe.\n* Can interact with PauserSet\n * pause the ACL [via: Safe]",
"discoveryDrivenData": true
},
{
"id": "EOA-45-and-EOA-48",
"name": "EOA 45 and EOA 48",
"accounts": [
{
"address": "eth:0x6dd470B50BbC1Ec03bf2B13B30c7d864F2025874",
"type": "EOA",
"isVerified": true,
"name": "0x6dd4…5874",
"url": "https://etherscan.io/address/0x6dd470B50BbC1Ec03bf2B13B30c7d864F2025874",
"displayName": "EOA 45"
},
{
"address": "eth:0x9b828219ad863491eb9b5225aE2d133eEDEa9B71",
"type": "EOA",
"isVerified": true,
"name": "0x9b82…9B71",
"url": "https://etherscan.io/address/0x9b828219ad863491eb9b5225aE2d133eEDEa9B71",
"displayName": "EOA 48"
}
],
"chain": "ethereum",
"description": "Member of ZamaGovMultisigB.\n* Can interact with PauserSet\n * pause the ACL ",
"discoveryDrivenData": true
},
{
"id": "EOA-46-and-EOA-47",
"name": "EOA 46 and EOA 47",
"accounts": [
{
"address": "eth:0x705380c013c13B4ce62338ab1F012036BAC802b3",
"type": "EOA",
"isVerified": true,
"name": "0x7053…02b3",
"url": "https://etherscan.io/address/0x705380c013c13B4ce62338ab1F012036BAC802b3",
"displayName": "EOA 46"
},
{
"address": "eth:0x8edFb885a32C72aF32943D4db13D319181d18CB8",
"type": "EOA",
"isVerified": true,
"name": "0x8edF…8CB8",
"url": "https://etherscan.io/address/0x8edFb885a32C72aF32943D4db13D319181d18CB8",
"displayName": "EOA 47"
}
],
"chain": "ethereum",
"description": "Member of ZamaGovMultisigB, ZamaGovMultisigA.\n* Can interact with PauserSet\n * pause the ACL ",
"discoveryDrivenData": true
}
]
},
"zama": {
"roles": [],
"actors": [
{
"id": "SafeL2",
"name": "SafeL2",
"description": "A Multisig with 3/5 threshold. \nGateway owner Safe. Its LayerZero governance module is outside the Zama Gateway protocol surface covered here.\n* Can upgrade **with no delay**\n * MultichainACL \n * Decryption \n * KMSGeneration \n * ProtocolPayment \n * InputVerification \n * CiphertextCommits \n * GatewayConfig \n* Can interact with Decryption\n * unpause Decryption \n* Can interact with KMSGeneration\n * start KMS key generation, CRS generation, PRSS initialization, and key resharing \n* Can interact with GatewayPauserSet\n * add, remove, or swap gateway pausers \n* Can interact with ProtocolPayment\n * set gateway fee prices for input verification, public decryption, and user decryption \n* Can interact with InputVerification\n * unpause InputVerification \n* Can interact with GatewayConfig\n * update KMS, coprocessor, custodian, host-chain, and threshold configuration, transfer GatewayConfig ownership, and unpause gateway workflow contracts ",
"description": "A Multisig with 3/5 threshold. \nGateway owner Safe. Its LayerZero governance module is outside the Zama Gateway protocol surface covered here.\n* Can upgrade **with no delay**\n * MultichainACL \n * Decryption \n * KMSGeneration \n * ProtocolPayment \n * InputVerification \n * CiphertextCommits \n * GatewayConfig \n* Can interact with Decryption\n * unpause Decryption \n* Can interact with KMSGeneration\n * start KMS key generation, CRS generation, PRSS initialization, and key resharing \n* Can interact with GatewayPauserSet\n * add, remove, or swap gateway pausers \n* Can interact with ProtocolPayment\n * set gateway fee prices for input verification, public decryption, and user decryption \n* Can interact with InputVerification\n * unpause InputVerification \n* Can interact with GatewayConfig\n * create KMS contexts that immediately become current, update current thresholds and other gateway configuration, transfer ownership, and unpause gateway workflow contracts. Historical KMS contexts cannot be removed in this version ",
"accounts": [
{
"address": "zama:0x5f0F86BcEad6976711C9B131bCa5D30E767fe2bE",
"type": "Contract",
"isVerified": true,
"name": "0x5f0F…e2bE",
"url": "https://explorer.mainnet.zama.org/address/0x5f0F86BcEad6976711C9B131bCa5D30E767fe2bE"
}
],
"chain": "zama",
"references": [],
"participants": [
{
"address": "zama:0x9b828219ad863491eb9b5225aE2d133eEDEa9B71",
"type": "EOA",
"isVerified": true,
"name": "EOA 53",
"url": "#EOA-50,-EOA-51,-EOA-52-and-EOA-53"
},
{
"address": "zama:0xf299Cd189498D7d0F0FfACd4DdC94166f614fBBE",
"type": "EOA",
"isVerified": true,
"name": "0xf299…fBBE",
"url": "https://explorer.mainnet.zama.org/address/0xf299Cd189498D7d0F0FfACd4DdC94166f614fBBE"
},
{
"address": "zama:0x6dd470B50BbC1Ec03bf2B13B30c7d864F2025874",
"type": "EOA",
"isVerified": true,
"name": "EOA 50",
"url": "#EOA-50,-EOA-51,-EOA-52-and-EOA-53"
},
{
"address": "zama:0x8edFb885a32C72aF32943D4db13D319181d18CB8",
"type": "EOA",
"isVerified": true,
"name": "EOA 52",
"url": "#EOA-50,-EOA-51,-EOA-52-and-EOA-53"
},
{
"address": "zama:0x705380c013c13B4ce62338ab1F012036BAC802b3",
"type": "EOA",
"isVerified": true,
"name": "EOA 51",
"url": "#EOA-50,-EOA-51,-EOA-52-and-EOA-53"
}
],
"discoveryDrivenData": true
},
{
"id": "EOA-1",
"name": "EOA 1",
"accounts": [
{
"address": "zama:0x0000000000000000000000000000000000000000",
"type": "EOA",
"isVerified": true,
"name": "0x0000…0000",
"url": "https://explorer.mainnet.zama.org/address/0x0000000000000000000000000000000000000000",
"displayName": "EOA 1"
}
],
"chain": "zama",
"description": "* Can upgrade **with no delay**\n * MultichainACL \n * Decryption \n * KMSGeneration \n * ProtocolPayment \n * InputVerification \n * CiphertextCommits \n* Can interact with GatewayConfig\n * accept GatewayConfig ownership ",
"discoveryDrivenData": true
},
{
"id": "EOA-2",
"name": "EOA 2",
"accounts": [
{
"address": "zama:0x373E36A8684A3344E177C5894179845Cbe57AE44",
"type": "EOA",
"isVerified": true,
"name": "0x373E…AE44",
"url": "https://explorer.mainnet.zama.org/address/0x373E36A8684A3344E177C5894179845Cbe57AE44",
"displayName": "EOA 2"
}
],
"chain": "zama",
"description": "* Can interact with MultichainACL\n * submit public-decryption allowances, account handle allowances, and user-decryption delegation or revocation messages to MultichainACL \n* Can interact with InputVerification\n * sign encrypted input proof verification responses accepted by InputVerification \n * submit coprocessor proof verification and rejection responses to InputVerification \n* Can interact with CiphertextCommits\n * submit ciphertext and SNS ciphertext digests to CiphertextCommits \n* Can interact with GatewayConfig\n * sign encrypted input proof verification responses accepted by the gateway \n * submit coprocessor responses, ACL mirror updates, and ciphertext material commitments to gateway contracts ",
"discoveryDrivenData": true
},
{
"id": "EOA-3,-EOA-5,-EOA-6,-EOA-7,-EOA-8,-EOA-12,-EOA-13,-EOA-18,-EOA-20,-EOA-21,-EOA-23,-EOA-24-and-EOA-28",
"name": "EOA 3, EOA 5, EOA 6, EOA 7, EOA 8, EOA 12, EOA 13, EOA 18, EOA 20, EOA 21, EOA 23, EOA 24 and EOA 28",
"accounts": [
{
"address": "zama:0x0e25B8DB74c754C8275C0B219ba2A6CD7c59E31D",
"type": "EOA",
"isVerified": true,
"name": "0x0e25…E31D",
"url": "https://explorer.mainnet.zama.org/address/0x0e25B8DB74c754C8275C0B219ba2A6CD7c59E31D",
"displayName": "EOA 3"
},
{
"address": "zama:0x43e4c21cf9d24Dc5b4e00031349EC213A2ba8340",
"type": "EOA",
"isVerified": true,
"name": "0x43e4…8340",
"url": "https://explorer.mainnet.zama.org/address/0x43e4c21cf9d24Dc5b4e00031349EC213A2ba8340",
"displayName": "EOA 5"
},
{
"address": "zama:0x487e41623b7FeB464ff79F7326DCa791c9a1c5EC",
"type": "EOA",
"isVerified": true,
"name": "0x487e…c5EC",
"url": "https://explorer.mainnet.zama.org/address/0x487e41623b7FeB464ff79F7326DCa791c9a1c5EC",
"displayName": "EOA 6"
},
{
"address": "zama:0x4eC7200E392B97913cbD6d8160B011406EB019F1",
"type": "EOA",
"isVerified": true,
"name": "0x4eC7…19F1",
"url": "https://explorer.mainnet.zama.org/address/0x4eC7200E392B97913cbD6d8160B011406EB019F1",
"displayName": "EOA 7"
},
{
"address": "zama:0x577Fd21e4BC7D644A4177C4B89146e1Ab394De04",
"type": "EOA",
"isVerified": true,
"name": "0x577F…De04",
"url": "https://explorer.mainnet.zama.org/address/0x577Fd21e4BC7D644A4177C4B89146e1Ab394De04",
"displayName": "EOA 8"
},
{
"address": "zama:0x711EBE8aA590f9C9904ff279239E89dB2eFbC890",
"type": "EOA",
"isVerified": true,
"name": "0x711E…C890",
"url": "https://explorer.mainnet.zama.org/address/0x711EBE8aA590f9C9904ff279239E89dB2eFbC890",
"displayName": "EOA 12"
},
{
"address": "zama:0x74a1E2e87a4026b7B8b5252c747E514159515e9a",
"type": "EOA",
"isVerified": true,
"name": "0x74a1…5e9a",
"url": "https://explorer.mainnet.zama.org/address/0x74a1E2e87a4026b7B8b5252c747E514159515e9a",
"displayName": "EOA 13"
},
{
"address": "zama:0xB4CE988D382425F64c99A352375F72A5f1cf6FFB",
"type": "EOA",
"isVerified": true,
"name": "0xB4CE…6FFB",
"url": "https://explorer.mainnet.zama.org/address/0xB4CE988D382425F64c99A352375F72A5f1cf6FFB",
"displayName": "EOA 18"
},
{
"address": "zama:0xbaac6F9DD84bFB303F05B4DE45A88Eec86855BD0",
"type": "EOA",
"isVerified": true,
"name": "0xbaac…5BD0",
"url": "https://explorer.mainnet.zama.org/address/0xbaac6F9DD84bFB303F05B4DE45A88Eec86855BD0",
"displayName": "EOA 20"
},
{
"address": "zama:0xbcF4943A856497FB2345409D35f4d1eae9A0363E",
"type": "EOA",
"isVerified": true,
"name": "0xbcF4…363E",
"url": "https://explorer.mainnet.zama.org/address/0xbcF4943A856497FB2345409D35f4d1eae9A0363E",
"displayName": "EOA 21"
},
{
"address": "zama:0xC105B5933446658D226582f7A112F49a70b54364",
"type": "EOA",
"isVerified": true,
"name": "0xC105…4364",
"url": "https://explorer.mainnet.zama.org/address/0xC105B5933446658D226582f7A112F49a70b54364",
"displayName": "EOA 23"
},
{
"address": "zama:0xD227C4B573800EdA3bAdA6DAC872E9134E012e6D",
"type": "EOA",
"isVerified": true,
"name": "0xD227…2e6D",
"url": "https://explorer.mainnet.zama.org/address/0xD227C4B573800EdA3bAdA6DAC872E9134E012e6D",
"displayName": "EOA 24"
},
{
"address": "zama:0xEd1D622bd59d657580aBAc65312b40B4B2dA6236",
"type": "EOA",
"isVerified": true,
"name": "0xEd1D…6236",
"url": "https://explorer.mainnet.zama.org/address/0xEd1D622bd59d657580aBAc65312b40B4B2dA6236",
"displayName": "EOA 28"
}
],
"chain": "zama",
"description": "* Can interact with Decryption\n * submit KMS decryption responses to Decryption \n* Can interact with KMSGeneration\n * submit KMS key-generation and CRS-generation responses to KMSGeneration \n* Can interact with GatewayConfig\n * submit KMS decryption, key-generation, and CRS-generation responses to gateway contracts ",
"discoveryDrivenData": true
},
{
"id": "EOA-4,-EOA-9,-EOA-10,-EOA-11,-EOA-14,-EOA-15,-EOA-16,-EOA-17,-EOA-19,-EOA-22,-EOA-25,-EOA-26-and-EOA-27",
"name": "EOA 4, EOA 9, EOA 10, EOA 11, EOA 14, EOA 15, EOA 16, EOA 17, EOA 19, EOA 22, EOA 25, EOA 26 and EOA 27",
"accounts": [
{
"address": "zama:0x41b19EB4585450db79ac03ba9503106EC7895905",
"type": "EOA",
"isVerified": true,
"name": "0x41b1…5905",
"url": "https://explorer.mainnet.zama.org/address/0x41b19EB4585450db79ac03ba9503106EC7895905",
"displayName": "EOA 4"
},
{
"address": "zama:0x5d0e7033774dD43eE546D49b72Bd0B561E52f7C8",
"type": "EOA",
"isVerified": true,
"name": "0x5d0e…f7C8",
"url": "https://explorer.mainnet.zama.org/address/0x5d0e7033774dD43eE546D49b72Bd0B561E52f7C8",
"displayName": "EOA 9"
},
{
"address": "zama:0x6016DCA5e91e62826e3FEA1Fb0a763602dc1E385",
"type": "EOA",
"isVerified": true,
"name": "0x6016…E385",
"url": "https://explorer.mainnet.zama.org/address/0x6016DCA5e91e62826e3FEA1Fb0a763602dc1E385",
"displayName": "EOA 10"
},
{
"address": "zama:0x6e5f02Cd4B33f0Cf4ED5326ac9eE25e5aA8c4921",
"type": "EOA",
"isVerified": true,
"name": "0x6e5f…4921",
"url": "https://explorer.mainnet.zama.org/address/0x6e5f02Cd4B33f0Cf4ED5326ac9eE25e5aA8c4921",
"displayName": "EOA 11"
},
{
"address": "zama:0x7C17BE232e5968BDa9516478B798b9E90D013fCC",
"type": "EOA",
"isVerified": true,
"name": "0x7C17…3fCC",
"url": "https://explorer.mainnet.zama.org/address/0x7C17BE232e5968BDa9516478B798b9E90D013fCC",
"displayName": "EOA 14"
},
{
"address": "zama:0x7C5Eeb4D8CED0101799B8Cc212eE874097364F58",
"type": "EOA",
"isVerified": true,
"name": "0x7C5E…4F58",
"url": "https://explorer.mainnet.zama.org/address/0x7C5Eeb4D8CED0101799B8Cc212eE874097364F58",
"displayName": "EOA 15"
},
{
"address": "zama:0x915055c5F05C0d88BCdf1e3DfBA18aBD2a18350f",
"type": "EOA",
"isVerified": true,
"name": "0x9150…350f",
"url": "https://explorer.mainnet.zama.org/address/0x915055c5F05C0d88BCdf1e3DfBA18aBD2a18350f",
"displayName": "EOA 16"
},
{
"address": "zama:0x966188a1f697F6A1B5cfA51495DD8A8A7b5CdB8D",
"type": "EOA",
"isVerified": true,
"name": "0x9661…dB8D",
"url": "https://explorer.mainnet.zama.org/address/0x966188a1f697F6A1B5cfA51495DD8A8A7b5CdB8D",
"displayName": "EOA 17"
},
{
"address": "zama:0xB7978e602D2AF68258dA614AF949E014BF0DE0eb",
"type": "EOA",
"isVerified": true,
"name": "0xB797…E0eb",
"url": "https://explorer.mainnet.zama.org/address/0xB7978e602D2AF68258dA614AF949E014BF0DE0eb",
"displayName": "EOA 19"
},
{
"address": "zama:0xbf05c17BEB0BF2F2c78Cd491A53a148e035279C3",
"type": "EOA",
"isVerified": true,
"name": "0xbf05…79C3",
"url": "https://explorer.mainnet.zama.org/address/0xbf05c17BEB0BF2F2c78Cd491A53a148e035279C3",
"displayName": "EOA 22"
},
{
"address": "zama:0xdC472efa1642D5afB684aAaa546E22FB24AAB965",
"type": "EOA",
"isVerified": true,
"name": "0xdC47…B965",
"url": "https://explorer.mainnet.zama.org/address/0xdC472efa1642D5afB684aAaa546E22FB24AAB965",
"displayName": "EOA 25"
},
{
"address": "zama:0xDFc9Dcb3D206AA164770874f36a4B5AD2EE5194f",
"type": "EOA",
"isVerified": true,
"name": "0xDFc9…194f",
"url": "https://explorer.mainnet.zama.org/address/0xDFc9Dcb3D206AA164770874f36a4B5AD2EE5194f",
"displayName": "EOA 26"
},
{
"address": "zama:0xe9f7ecfF21a2e0Ca58eA26ae869FEF38ab49ed6f",
"type": "EOA",
"isVerified": true,
"name": "0xe9f7…ed6f",
"url": "https://explorer.mainnet.zama.org/address/0xe9f7ecfF21a2e0Ca58eA26ae869FEF38ab49ed6f",
"displayName": "EOA 27"
}
],
"chain": "zama",
"description": "* Can interact with Decryption\n * sign public decryption results and user decryption shares accepted by Decryption \n* Can interact with KMSGeneration\n * sign KMS key-generation and CRS-generation material accepted by KMSGeneration \n* Can interact with GatewayConfig\n * sign KMS decryption, key-generation, and CRS-generation material accepted by gateway contracts ",
"discoveryDrivenData": true
},
{
"id": "EOA-29",
"name": "EOA 29",
"accounts": [
{
"address": "zama:0x0000000000000000000000000000000000000001",
"type": "EOA",
"isVerified": true,
"name": "0x0000…0001",
"url": "https://explorer.mainnet.zama.org/address/0x0000000000000000000000000000000000000001",
"displayName": "EOA 29"
}
],
"chain": "zama",
"description": "* Can interact with GatewayConfig\n * participate in gateway key custody workflows \n * sign gateway key custody material ",
"discoveryDrivenData": true
},
{
"id": "EOA-50,-EOA-51,-EOA-52-and-EOA-53",
"name": "EOA 50, EOA 51, EOA 52 and EOA 53",
"accounts": [
{
"address": "zama:0x6dd470B50BbC1Ec03bf2B13B30c7d864F2025874",
"type": "EOA",
"isVerified": true,
"name": "0x6dd4…5874",
"url": "https://explorer.mainnet.zama.org/address/0x6dd470B50BbC1Ec03bf2B13B30c7d864F2025874",
"displayName": "EOA 50"
},
{
"address": "zama:0x705380c013c13B4ce62338ab1F012036BAC802b3",
"type": "EOA",
"isVerified": true,
"name": "0x7053…02b3",
"url": "https://explorer.mainnet.zama.org/address/0x705380c013c13B4ce62338ab1F012036BAC802b3",
"displayName": "EOA 51"
},
{
"address": "zama:0x8edFb885a32C72aF32943D4db13D319181d18CB8",
"type": "EOA",
"isVerified": true,
"name": "0x8edF…8CB8",
"url": "https://explorer.mainnet.zama.org/address/0x8edFb885a32C72aF32943D4db13D319181d18CB8",
"displayName": "EOA 52"
},
{
"address": "zama:0x9b828219ad863491eb9b5225aE2d133eEDEa9B71",
"type": "EOA",
"isVerified": true,
"name": "0x9b82…9B71",
"url": "https://explorer.mainnet.zama.org/address/0x9b828219ad863491eb9b5225aE2d133eEDEa9B71",
"displayName": "EOA 53"
}
],
"chain": "zama",
"description": "Member of SafeL2.\n* Can interact with GatewayPauserSet\n * pause GatewayConfig and pausable gateway workflow contracts ",
"discoveryDrivenData": true
}
]
}
}